elevenlabs

Warn

Audited by Socket on Sep 22, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: the skill's main function is coherent for speech generation, but it is misleadingly framed as ElevenLabs while routing credentials and content through Pixazo's gateway instead of ElevenLabs' official API. The credential persistence and wildcard transitive skill-install instruction add moderate risk even though there is no confirmed malware or dangerous installer payload.

Confidence: 92%Severity: 68%
Audit Metadata
Analyzed At
Sep 22, 2026, 09:02 PM
Package URL
pkg:socket/skills-sh/pixazo-ai%2Fskills%2Felevenlabs%2F@8e9091cd6a66cf8bdbf6cce64ba71ba00787aa51308f985aff5c5da1df537ba5